Re: openssl in base should install c_rehash

On 02/08/2018 17:31, Chris H wrote:
> On Thu, 08 Feb 2018 13:25:13 -0700 "Ian Lepore" <ian_at_freebsd.org> said
>> On Thu, 2018-02-08 at 21:15 +0100, Ulrich Spörlein wrote:
>> > 2018-02-08 21:00 GMT+01:00 Jung-uk Kim <jkim_at_freebsd.org>:
>> > > > > > On 02/08/2018 08:52, Jan Bramkamp wrote:
>> > > > > > > On 08.02.18 14:24, Ulrich Spörlein wrote:
>> > > > > > > > > Hey,
>> > > > > > > > > c_rehash has somehow disappeared from the base system.
>> We still
>> > > > > install the
>> > > > > manpage it seems, but the tool itself is missing. Can we have
>> > > > > that back?
>> > > > > > > > > > > > > root_at_acme:/etc/ssl# locate c_rehash
>> > > > > ...
>> > > > > /usr/share/openssl/man/man1/c_rehash.1.gz
>> > > > > /usr/src/crypto/openssl/doc/apps/c_rehash.pod
>> > > > > /usr/src/secure/usr.bin/openssl/man/c_rehash.1
>> > > > > > > > > > > > > The port seems to install it just fine:
>> > > > > > > > > root_at_acme:/etc/ssl# grep -r c_rehash /usr/ports/
>> > > > > /usr/ports/security/openssl/pkg-plist:bin/c_rehash
>> > > > > /usr/ports/security/openssl/pkg-plist:man/man1/c_rehash.1.gz
>> > > > > > > > > It looks like the merge of OpenSSL 1.0.1c got rid of
>> it (if I'm
>> > > > > reading the
>> > > > > history with git pickaxe right).
>> > > > The LibreSSL port lacks a c_rehash script as well. Putting
>> > > > c_rehash back
>> > > > into base wouldn't solve the problem because it requires Perl 5.
>> > > Correct.  I just removed the manual page to not confuse users.
>> > > > > https://svnweb.freebsd.org/changeset/base/329024
>> > > > > Thanks for letting me know!
>> > > > > Jung-uk Kim
>> > > > > > I would rather that c_rehash is brought back. I can install
>> perl just
>> > fine
>> > (or have it anyway installed), that's not the case with openssl from
>> > ports,
>> > as that will mess up many things.
>> > > Guess I'll download my own version ... :(
>> > > Uli
>>
>>
>> Maybe we should just replace ours in base with a non-perl version,
>> something like this one?
>>
>> https://opensource.apple.com/source/OpenSSL/OpenSSL-5/openssl/tools/c_rehash.in.auto.html
>>
>>
>> -- Ian
> Excellent link, Ian. Thanks!
> Couldn't this be in $base? I'd like to vote yes. :-)

From OpenSSL 1.1.0, openssl(1) added "rehash" command.

https://www.openssl.org/docs/man1.1.0/apps/rehash.html

I don't think we need yet another implementation in the base.

Jung-uk Kim